Name: osquery
Author: osquery

osquery

osquery·osquery.osquery

SQL powered operating system instrumentation, monitoring, and analytics.

winget install --id osquery.osquery --exact --source winget

Latest 5.23.1·June 24, 2026

Release Notes

This is a bug and security fix release. What's Changed Fixes

Fix heap buffer overflow in Windows processes table by @seph in #8934
Fix heap buffer overflow in Windows authenticode table by @seph in #8923
Fix use-after-free in Linux process_file_events implementation by @zwass in #8950
Fix incorrect permissions on temporary file carve directories by @zwass in #8961
Fix documentation for process_open_handles table by @seph in #8853
Fix subject2 and issuer2 columns for Windows certificates table by @getvictor in #8963 Full Changelog: 5.23.0...5.23.1

x64—BB3ADC9F32F257147855404D24BCEEBCD8BAF6E65F4D4CA43E186F4A85FA6ED3

5.23.0

x64—5060C7CC21BC00258B5D7822A769CB619FF432C02BA89F6C1B6CBFA127D59B40

5.22.1

x64—91238C6F7543979E59D88886D61E8E7A222F6595F89B24BFAC385D31433F7A02

5.21.0

x64—573E53F9C5E8BE3B356CAB1CD1A4C4BB175E811B89BE7AD89D04AFAC8527B464

5.20.0

x64—68BC735B82AEB7AF8660A770B6626BE2ADBA5403E8112C62BAB254BA5B917960

5.19.0

x64—6FE06CAB43A31C596E4001616EEE66FB32556BF5C228C4A4BA6DAF2897EDC1A3

5.18.1

x64—BA4C5DEF84E35EF101FC4EC3F47DD2124C66D736F0F124ACDB18C7B29DF253FE

5.17.0

x64—AF3CD2F989F7F7ACA667291674EDA4656F7795A7559F47E72521E71B31FF3BA5

5.16.0

x64—BE40425E0E4C182F9A1B882FC12A8B81FA4E872D3CD27AAD62AEE0CD1FAC7038

5.11.0

x64—825BF75D0DCA88A5E8CEA699B90696738BD9BE44C9B8CFCE3906A3E2AB49B156

5.8.2

x64—D319837D4E95D1E477C2126D383501180925A29F488FF1164FA16D2E576F96DD

5.6.0

x64—C480B7B0352FB19B952DF9C0331926F134B1234DA716C8B12B6A9C5E19CABCE9